Senior Network Engineer

Blink Health • Pittsburgh, PA

8d • Hybrid

About The Position

Blink Health is seeking a Senior Network Engineer to join their Networking team. This role involves hands-on ownership of the company's hybrid network, encompassing physical office environments, distributed sites, and AWS cloud connectivity. The daily work focuses on physical infrastructure such as Meraki switches and access points, Palo Alto firewalls, Starlink and ISP connectivity, site-to-site VPNs, and the routing and switching necessary to maintain office, warehouse, and remote site operations. The position also includes responsibility for the AWS networking layer, connecting the physical infrastructure to cloud workloads, and automating these processes using infrastructure-as-code for repeatability, reviewability, and reliability. This role is ideal for an engineer proficient across the entire network stack, capable of troubleshooting physical infrastructure issues, optimizing wireless deployments, debugging BGP sessions, and developing Terraform code to prevent future problems.

Requirements

• 8+ years of progressively senior network engineering experience with deep hands-on ownership of physical network infrastructure (switching, routing, wireless, firewalls).
• 5+ years of experience administering enterprise wireless and switching platforms, preferably Cisco Meraki (Dashboard operations, switch stacks, VLAN design, RF tuning).
• Hands-on Palo Alto firewall experience (security policy design, NAT, IPSec/SSL VPN, Panorama management).
• Expert-level knowledge of enterprise network protocols: BGP, OSPF, STP, VLANs, IPSec, DNS, SNMP, DHCP, and command-line troubleshooting skills.
• Strong AWS networking experience: VPC architecture, Transit Gateway, Direct Connect, Site-to-Site VPN, Security Groups, Route 53, VPC peering, and ability to design/operate multi-VPC environments connected to physical sites.
• Proficiency in Terraform for production network infrastructure.
• Methodical, command-line-first troubleshooting skills, including reading packet captures and using tools like tcpdump and traceroute.
• Solid Linux fundamentals, comfortable in a shell and understanding OS-network interaction.
• Awareness of microservices and Kubernetes networking (service-to-service connectivity, DNS, ingress, routing in containerized environments).
• Strong incident ownership experience, having led major production network outages from detection to resolution.
• Strong written and verbal communication skills for documentation, stakeholder updates, and post-incident reviews.
• Comfortable working in the Eastern Time Zone.
• Ability to travel up to 25% to office sites.

Nice To Haves

• Familiarity with Strata Cloud Manager.
• Experience with Terragrunt, CloudFormation, or Ansible.

Responsibilities

• Manage, monitor, and maintain office, site, and distributed network infrastructure (Meraki switches/wireless, Palo Alto firewalls, Starlink/ISP links, site-to-site VPNs).
• Design and deploy office and site networks, including switching, routing, VLAN segmentation, wireless coverage, and secure remote connectivity.
• Tune wireless deployments through RF planning, capacity modeling, channel optimization, and troubleshooting roaming/interference.
• Configure and harden Palo Alto firewalls and VPNs (security policies, NAT, IPSec tunnels, Global Protect, Panorama management).
• Troubleshoot complex Layer 1-7 issues using tools like Wireshark, tcpdump, ThousandEyes, Fiddler, and nmap.
• Maintain monitoring and alerting systems (PRTG, Nagios, Grafana, New Relic, ThousandEyes).
• Serve as the technical escalation point for network incidents, managing production outages from alert to root cause analysis and post-incident improvements.
• Participate in an on-call rotation.
• Maintain the multi-VPC AWS environment (VPCs, subnets, route tables, Security Groups, NACLs, VPC peering).
• Operate AWS Transit Gateway, Direct Connect, and Site-to-Site VPN connectivity.
• Manage Route 53 public and private zones, DNS forwarders, and hybrid name resolution.
• Support and tune AWS Load Balancers (ALB, NLB) for application teams.
• Troubleshoot connectivity issues across AWS, on-prem, and Kubernetes environments.
• Use Terraform (and Terragrunt) to deploy and manage networking resources.
• Contribute to and maintain CI/CD pipelines for network changes via GitHub workflows, peer review, and automated validation.
• Build tools and scripts (Python, Bash) to automate operational tasks.
• Prevent configuration drift through code-first network management.
• Configure, harden, and patch network devices and services according to security best practices.
• Monitor security alerts, investigate incidents, and coordinate remediation with the security team.
• Validate firewall changes for least-privilege and operational impact.
• Maintain network documentation, topology diagrams, runbooks, and change records.
• Partner with engineering teams to troubleshoot network design and connectivity in AWS and Kubernetes environments.
• Provide technical consulting on network architecture decisions.
• Communicate effectively with technical and non-technical stakeholders during incidents, changes, and maintenance.
• Work with IT leadership to evaluate new products, vendor roadmaps, and infrastructure investments.
• Backup the systems engineering team for Windows and Linux server administration when network issues overlap with server/application behavior.

Benefits

• Impact on customers when they are most vulnerable (healthcare and finances).
• Opportunity to be part of a fast-growing healthcare company.
• Ability to build a generational company.
• Relentlessly learning, constantly curious, and aggressively collaborative cross-functional team environment.
• Equal opportunity employer valuing diversity.
• Potential for SMS/MMS updates regarding application status if phone number is provided and consent is given.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed